What does happen when the user isn't in DB? The $params below will have 0 as UserID, passed name as UserName and Token will be empty. Are we sure we want to pass it with a cookie?